Odaily Planet Daily reports: CrowdStrike, in collaboration with the U.S. Department of Justice, has dismantled the Sality peer-to-peer botnet, isolating over 15,000 infected devices worldwide. The botnet has been active since 2003 and, over the past eight years, primarily distributed a clipboard hijacking tool called EggJagger to steal Bitcoin and ETH transfer funds. EggJagger monitors cryptocurrency wallet addresses copied by victims and replaces them with addresses controlled by attackers, redirecting funds to the attackers. CrowdStrike estimates that this tool alone has stolen at least $150,000 worth of crypto assets; due to most funds remaining untransferred, the associated holdings reached approximately $1.35 million in value as of January 2025. The U.S. Department of Justice, FBI, and Defense Criminal Investigative Service have seized related domains within the United States, while police in Bulgaria, Hungary, and Romania have shut down infrastructure in Europe. Currently, infected devices have been redirected to traffic-receiving servers controlled by CrowdStrike, but the original malware remains active within the devices until manually removed.
Over 15,000 devices isolated in takedown of Sality botnet; $150K in stolen cryptocurrency recovered
KuCoinFlashShare
Summary
Crypto news broke today as CrowdStrike and the U.S. Department of Justice dismantled the Sality botnet, isolating over 15,000 infected devices worldwide. Active since 2003, the botnet used the EggJagger tool to steal Bitcoin and ETH by swapping wallet addresses. Today, $150,000 in stolen funds were recovered, with a peak of $1.35 million in January 2025. Authorities seized domains in the U.S., while European police shut down infrastructure in Bulgaria, Hungary, and Romania. Infected devices are now redirected to CrowdStrike servers, but the malware remains active until manually removed.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.